Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft
File:                     NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft (raw, json)
Hash identifier:          mIiZvYFuuR23N6ZTxjhoNPLTJovoFgryK4KSzAkTz48=
Subject key identifier:   3E:D7:69:D2:6C:A1:F9:E4:59:A8:EF:41:4D:3E:41:E8:E1:FC:37:7D
Authority key identifier: 34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3
Certificate issuer:       /CN=A91BB9EF/serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft
Manifest number:          A6
Signing time:             Fri 09 Oct 2026 07:54:06 +0000
Manifest this update:     Fri 09 Oct 2026 07:54:05 +0000
Manifest next update:     Fri 16 Oct 2026 07:54:05 +0000
Files and hashes:         1: NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl (hash: 2jp5NstsypKw6uWhJEj1EGPgGtPPPAUIByt8F+ipIZg=)
                          2: E57517B0C84F11F0B9AA990CC4F9AE02.roa (hash: PoRqLZ1iDKniKKiDSN0IaMYeEcnEhdUqkDtLadUJ/NE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl
                          rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB9EF, serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3
        Validity
            Not Before: Oct  9 07:54:05 2026 GMT
            Not After : Oct 16 07:54:05 2026 GMT
        Subject: CN=6ac89d9d-aa25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a2:db:36:56:bf:ce:63:52:9a:bb:41:4a:59:
                    4f:30:da:30:4c:89:ab:28:c1:99:48:b2:9f:45:93:
                    69:51:a6:db:d3:f6:93:d3:07:50:b3:72:09:86:46:
                    91:e5:8b:7b:98:63:09:db:88:09:77:f5:1d:3d:07:
                    bd:90:bf:81:30:39:22:07:ef:c8:18:96:92:99:7c:
                    0e:b9:89:b1:9e:52:3c:36:57:9e:2a:f4:b6:80:9a:
                    cf:5d:d5:2f:43:5e:b3:89:0c:ba:30:9d:28:3f:70:
                    ae:1c:d7:06:27:65:0a:3f:be:24:e5:88:e0:49:71:
                    8c:b0:c5:0a:02:9f:d3:30:cf:b2:9a:20:32:73:d5:
                    3a:23:8f:76:47:02:42:6b:81:67:c7:bc:a3:19:4b:
                    f2:6e:7d:72:be:b1:4d:92:8d:44:16:85:0c:61:ce:
                    b0:2a:fb:53:6c:44:e7:61:4c:96:8d:fc:fa:7a:35:
                    3e:bb:12:e7:6f:3c:4e:a3:bb:37:18:22:56:55:5f:
                    ad:8f:30:34:b6:c6:5b:26:e2:26:23:25:d1:a1:33:
                    23:0f:3b:31:ca:cf:a5:69:e1:84:13:ee:49:2d:87:
                    f9:a1:32:02:d4:9a:2e:89:5f:89:7f:0b:25:97:71:
                    d5:ab:4b:89:26:51:7f:09:d3:a8:63:e5:58:1a:6f:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D7:69:D2:6C:A1:F9:E4:59:A8:EF:41:4D:3E:41:E8:E1:FC:37:7D
            X509v3 Authority Key Identifier:
                keyid:34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:77:d9:6d:8c:f5:1e:48:71:19:9b:cf:c1:9b:29:5e:dd:67:
         62:7c:d7:74:48:f2:c5:bb:08:0d:de:9d:68:0a:f4:06:1d:40:
         cc:ee:9e:58:6c:f4:6b:fb:ac:6f:a5:b4:15:78:cb:8c:22:8f:
         43:6a:e7:10:fc:e9:35:01:8a:49:2b:e5:81:5f:e1:49:32:d5:
         98:be:44:4e:55:65:1d:34:e6:93:46:ab:9a:cf:3c:e7:23:c1:
         f4:bb:64:ea:53:ef:81:3a:13:02:ba:95:6c:3a:52:3f:f5:43:
         30:ac:76:6e:e9:5b:a5:9c:d4:ca:d5:61:7b:08:72:9d:b3:1f:
         67:31:f7:b5:34:95:6d:a0:1b:4e:bf:c2:ba:fb:bf:df:fa:9c:
         7b:21:31:c4:44:96:f0:27:f6:38:39:14:2e:1f:4f:84:2e:13:
         86:02:e2:2c:d5:82:c4:84:03:76:f8:3d:fe:c0:70:dd:27:7b:
         33:b7:6e:8d:6c:e7:27:60:e8:bd:bf:a2:dd:1c:ba:15:5c:92:
         e2:59:c0:3e:ab:bd:8b:10:39:fd:0d:1f:0e:de:14:aa:c9:64:
         78:5a:a3:2f:81:c7:32:bf:e9:82:10:d0:5e:60:65:3d:68:14:
         08:6a:20:4a:ac:11:37:a2:5f:08:f7:d3:77:d6:43:c0:d6:b2:
         94:58:1a:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI5RUYxMTAvBgNVBAUTKDM0RjQ2NzZDMDY2MzgzOTE0Nzk3M0Q0Qzg2OUI0OURD
OEM2NjQwRjMwHhcNMjYxMDA5MDc1NDA1WhcNMjYxMDE2MDc1NDA1WjAYMRYwFAYD
VQQDEw02YWM4OWQ5ZC1hYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6KLbNla/zmNSmrtBSllPMNowTImrKMGZSLKfRZNpUabb0/aT0wdQs3IJhkaR
5Yt7mGMJ24gJd/UdPQe9kL+BMDkiB+/IGJaSmXwOuYmxnlI8NleeKvS2gJrPXdUv
Q16ziQy6MJ0oP3CuHNcGJ2UKP74k5YjgSXGMsMUKAp/TMM+ymiAyc9U6I492RwJC
a4Fnx7yjGUvybn1yvrFNko1EFoUMYc6wKvtTbETnYUyWjfz6ejU+uxLnbzxOo7s3
GCJWVV+tjzA0tsZbJuImIyXRoTMjDzsxys+laeGEE+5JLYf5oTIC1JouiV+Jfwsl
l3HVq0uJJlF/CdOoY+VYGm8EkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7XadJs
ofnkWajvQU0+Qejh/Dd9MB8GA1UdIwQYMBaAFDT0Z2wGY4ORR5c9TIabSdyMZkDz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjlFRi84Nzg3MjNFNkM4
NEYxMUYwOEJFQkNEMEJDNEY5QUUwMi9OUFJuYkFaamc1RkhsejFNaHB0SjNJeG1R
UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05QUm5iQVpqZzVGSGx6MU1ocHRKM0l4bVFQTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjlFRi84Nzg3MjNFNkM4NEYxMUYwOEJFQkNEMEJDNEY5QUUwMi9OUFJuYkFaamc1
RkhsejFNaHB0SjNJeG1RUE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA3fZbYz1HkhxGZvPwZspXt1nYnzXdEjyxbsIDd6daAr0Bh1AzO6eWGz0a/us
b6W0FXjLjCKPQ2rnEPzpNQGKSSvlgV/hSTLVmL5ETlVlHTTmk0arms885yPB9Ltk
6lPvgToTArqVbDpSP/VDMKx2bulbpZzUytVhewhynbMfZzH3tTSVbaAbTr/Cuvu/
3/qceyExxESW8Cf2ODkULh9PhC4ThgLiLNWCxIQDdvg9/sBw3Sd7M7dujWznJ2Do
vb+i3Ry6FVyS4lnAPqu9ixA5/Q0fDt4UqslkeFqjL4HHMr/pghDQXmBlPWgUCGog
SqwRN6JfCPfTd9ZDwNaylFgaNQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:49:12 2026 by rpki-client